Systems and methods for a de-identified medical and healthcare data marketplace
Inventors
Rosenberg, Michael • BENITZ, MALCOLM • SUTTLES, JASON • WOODLIEF, CHRIS • GOLDSTEIN, BRENT
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Abstract
The invention relates generally to systems and methods for protecting patient privacy when health care information is shared between various entities and, in particular, to systems and methods that implement a multi-stage sanitizing routine for de-identifying patient data from medical reports and diagnostic images to ensure patient privacy, while preserving the ability for sanitized medical reports and diagnostic images to be re-identified.
Core Innovation
The invention relates to a de-identified medical data marketplace for medical reports and diagnostic images (DICOM) supported by a multi-stage sanitizing routine. The marketplace includes a database storing a plurality of de-identified medical data sets, wherein each de-identified medical data set is owned by a different data owner, and a server coupled to the database. Customers submit a search request through an interface, where the request includes at least one criteria selected from a defined group such as a modality type, an equipment manufacturer, a body part, a study description, a protocol name, a requested procedure description, a scheduled procedure step description, and a keyword.
The system queries the database using the received criteria to retrieve at least one matching de-identified medical data set, and displays the at least one matching medical data set on the interface. The marketplace facilitates a financial transaction related to the at least one matching medical data set between the respective data owner and the customer, and in the described embodiment the financial transaction is stored on a blockchain communicatively coupled to the server. Auction-based sale is offered for diagnostic image sets via the interface.
The de-identification process is described as modality-driven by retrieving a medical image from a medical data set, determining a modality associated with the medical image, and retrieving a de-identification profile for the modality that specifies at least one area of the medical image that contains patient information. A sanitizing engine coupled to the server applies a blackout zone over the specified area, wherein patient information within the blackout zone is deleted by the sanitizing engine. Additional described aspects include using OCR to verify absence of remaining characters and re-encapsulating the sanitized output as a DICOM form.
The marketplace also includes re-identification concepts using a retrieval of a unique identifier, including an SOP instance UID, and stored private/hashed keys to determine re-identification eligibility. Search criteria used by the marketplace can include study date or study date range, and geographic criteria or demographic criteria, and the marketplace supports business flow concepts such as listing/membership fees, commissions/proceeds sharing, purchase in bulk or random lots, and blockchain-based privacy/security using encrypted direct peer-to-peer channels.
Claims Coverage
The provided independent claims cover three related but distinct systems for a medical data marketplace: a marketplace system storing de-identified medical data sets with blockchain-stored transactions, a marketplace system specifically for de-identified diagnostic image sets with auction-based sale, and a marketplace system that supports bulk requests and random selection combined with modality-profile blackout-zone de-identification.
Blockchain-backed medical data marketplace with selectable search criteria
A system for providing a medical data marketplace with a database storing a plurality of de-identified medical data sets owned by different data owners, a server coupled to the database, and programming that generates an interface for submitting a search request with criteria selected from a group consisting of a modality type, an equipment manufacturer, a body part, a study description, a protocol name, a requested procedure description, a scheduled procedure step description, and a keyword; receives the search request; queries the database using the criteria to retrieve at least one matching medical data set; displays the at least one matching medical data set on the interface; and facilitates a financial transaction related to the at least one matching medical data set between a respective data owner and the customer, wherein the financial transaction is stored on a blockchain communicatively coupled to the server.
De-identification and auction-based sale of matching diagnostic image sets
A system for providing a medical data marketplace with a database storing a plurality of diagnostic image sets owned by different data owners, a server coupled to the database, and programming that performs a de-identification process on each diagnostic image set to generate de-identified diagnostic image sets; generates an interface for submitting a search request with criteria selected from a group consisting of a modality type, an equipment manufacturer, a body part, a study description, a protocol name, a requested procedure description, a scheduled procedure step description, and a keyword; receives the search request; queries the database using the criteria to retrieve at least one matching diagnostic image set from the plurality of de-identified diagnostic image sets; displays the at least one matching diagnostic image set on the interface; and offers for sale to the customer the at least one matching diagnostic image set as an auction via the interface.
Bulk request with random selection and modality-driven blackout-zone sanitizing
A system for providing a medical data marketplace with a database storing a plurality of medical data sets owned by different data owners, a server coupled to the database, and programming that performs a de-identification process on each medical data set to generate de-identified medical data sets; generates an interface that allows a customer to submit a request for a bulk set of de-identified medical data; randomly selects at least one de-identified medical data set from the plurality of de-identified medical data sets; and facilitates a financial transaction related to the randomly selected at least one de-identified medical data set between a respective data owner and the customer; wherein the de-identification process includes retrieving a medical image, determining a modality associated with the medical image, retrieving a de-identification profile for the modality that specifies at least one area of the medical image containing patient information, and applying, by a sanitizing engine coupled to the server, a blackout zone over the specified area, wherein the patient information within the blackout zone is deleted by the sanitizing engine.
Across the independent claims, the marketplace is grounded by de-identified medical data sets/images, searchable through an interface using selectable criteria, and monetized through financial transactions that can be blockchain-stored and can be auction-based for diagnostic image sets. The bulk/random-lot variant ties de-identification to modality-associated de-identification profiles and blackout zones applied by a sanitizing engine over patient-information areas.
Stated Advantages
Facilitates a financial transaction between a data owner and a customer for matching de-identified medical data sets.
Stores the financial transaction on a blockchain communicatively coupled to the server.
Offers diagnostic image sets for sale as an auction via the interface.
Deletes patient information by applying a blackout zone over patient-information areas specified in a modality de-identification profile.
Allows bulk requests for de-identified medical data and random selection of at least one de-identified medical data set.
Documented Applications
Providing a de-identified medical data marketplace for customers to search and obtain matching de-identified medical data sets and diagnostic image sets (DICOM), with financial transaction handling including blockchain storage and auction-based sale for diagnostic image sets.
Providing a bulk de-identified medical data request interface where the system randomly selects at least one de-identified medical data set and facilitates a related financial transaction.
Interested in licensing this patent?